Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/suAiIWhRydSf4QIPc6qi6bXRrNQ.roa
File: suAiIWhRydSf4QIPc6qi6bXRrNQ.roa (raw, json)
Hash identifier: JUgA1K0FKMwazoaOjajT9H1AHOG1Uq1mYqPzheo8gtw=
Subject key identifier: B2:E0:22:21:68:51:C9:D4:9F:E1:02:0F:73:AA:A2:E9:B5:D1:AC:D4
Certificate issuer: /CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Certificate serial: 019C52226C67385833AE29544BB0343A8907
Authority key identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/suAiIWhRydSf4QIPc6qi6bXRrNQ.roa
Signing time: Thu 12 Feb 2026 13:55:13 +0000
ROA not before: Thu 12 Feb 2026 13:55:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39305
IP address blocks: 2a0e:9780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:52:22:6c:67:38:58:33:ae:29:54:4b:b0:34:3a:89:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Validity
Not Before: Feb 12 13:55:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2e022216851c9d49fe1020f73aaa2e9b5d1acd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ab:a5:69:51:2e:e0:17:4c:5a:70:79:14:4f:
29:2e:2f:e6:36:e8:c5:3b:a6:94:46:7f:14:5a:35:
16:55:90:0f:70:43:fa:38:5b:f0:a9:47:c7:c1:89:
de:0c:b8:69:2a:c5:fa:3b:83:d0:23:24:ba:59:19:
77:9f:de:3c:c0:da:fe:90:b5:63:06:39:a6:99:c3:
7a:31:fa:35:67:4a:50:22:f5:93:41:58:ea:77:38:
df:36:d5:d1:ea:31:8d:0d:f4:a6:87:e2:0b:6c:77:
9d:d3:61:67:e9:32:67:c7:82:05:84:f8:99:c3:7c:
75:23:e3:34:17:80:37:03:be:de:76:ec:d7:64:4e:
23:f4:de:3f:06:9f:2c:01:c8:3a:1e:96:fc:06:f4:
8d:60:86:5a:2a:9b:09:df:13:d9:56:24:5d:0b:37:
0a:16:f4:67:d2:5e:ac:d8:12:81:32:76:cf:fc:3e:
42:10:48:6e:cb:97:64:57:f8:19:56:70:eb:e2:c7:
40:81:78:37:4b:8e:18:ff:ce:c3:98:82:91:bc:bc:
2d:4d:e9:e4:54:8f:67:5a:43:31:3c:d0:46:62:9f:
6e:6f:37:b2:be:1e:3e:ea:3e:fd:ca:d9:25:30:22:
75:f7:2c:24:4e:0c:c9:8a:36:23:94:c2:44:fa:f6:
9b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E0:22:21:68:51:C9:D4:9F:E1:02:0F:73:AA:A2:E9:B5:D1:AC:D4
X509v3 Authority Key Identifier:
keyid:81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/suAiIWhRydSf4QIPc6qi6bXRrNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:9780::/29
Signature Algorithm: sha256WithRSAEncryption
5e:e4:c7:b3:39:c3:e1:b2:7c:3a:99:fc:5b:78:25:51:14:7a:
10:74:ae:6f:19:66:1d:83:9e:74:92:00:8c:83:71:65:a3:71:
2b:a7:16:d0:b2:9b:e1:5a:c7:42:d4:fa:9f:cb:a1:03:f4:f0:
24:b7:15:91:9c:ea:83:76:10:6f:ed:95:c5:28:50:1a:52:da:
3d:db:03:62:32:a4:7f:78:52:2f:70:02:d3:fa:4f:d9:34:10:
77:bc:2e:74:ec:cf:7b:28:c8:9c:89:1b:3b:49:b6:4c:81:02:
98:77:3a:ef:69:0e:1d:3d:af:81:ca:9a:d7:5c:29:07:a2:28:
5d:07:54:df:52:50:eb:92:ae:f5:15:49:f0:cf:62:4b:15:07:
8a:eb:e3:44:8d:40:06:ff:6c:74:18:5a:fd:ee:a3:8b:31:78:
1d:62:bd:b0:e2:03:82:08:3e:d6:5d:f8:ba:27:6d:92:46:96:
10:57:01:8c:5c:3e:e8:b4:65:e3:f2:1f:39:df:45:6c:4c:b2:
88:ef:db:c0:90:ba:11:69:6f:b2:97:97:67:d1:e2:b6:34:7b:
d2:5d:b4:3f:2e:69:55:ec:0f:c6:fb:e6:b0:0b:a8:25:57:bf:
49:d6:59:f1:a9:07:25:7a:0b:26:c8:1c:d2:21:d7:fc:f3:26:
d4:6a:fe:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:52:16 2026 by rpki-client